open port 80 when using LE certs. fixes #42

README.md

@@ -143,8 +143,9 @@ common ones.
         # address = forward address;
         "abuse@example.com" = "user1@example.com";
     };
-    
-    # Use Let's Encrypt certificates
+
+    # Use Let's Encrypt certificates. Note that this needs to set up a stripped
+    # down nginx and opens port 80.
     certificateScheme = 3;
 
     # Enable IMAP and POP3

default.nix

@@ -193,7 +193,8 @@ in
         3) You let the server create a certificate via `Let's Encrypt`. Note that
            this implies that a stripped down webserver has to be started. This also
            implies that the FQDN must be set as an `A` record to point to the IP of
-           the server. TODO: Explain more details
+           the server. In particular port 80 on the server will be opened. For details
+           on how to set up the domain records, see the guide in the readme.
       '';
     };
 

mail-server/networking.nix

@@ -27,7 +27,8 @@ in
         ++ lib.optional enableImap 143
         ++ lib.optional enableImapSsl 993
         ++ lib.optional enablePop3 110
-        ++ lib.optional enablePop3Ssl 995;
+        ++ lib.optional enablePop3Ssl 995
+        ++ lib.optional (certificateScheme == 3) 80;
     };
   };
 }